$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2b963d5-3b67-37fa-9f8b-7bea2365a011.roa File: b2b963d5-3b67-37fa-9f8b-7bea2365a011.roa (raw, json) Hash identifier: wISHC6iI70mM04M0cN/uLluXqr2ayUmUowUzVEPwrEQ= Subject key identifier: 84:1E:55:6C:89:87:7C:13:00:86:6F:AF:4D:84:0C:B3:88:4D:0F:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01CAAEEF58CF848D7AA6C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2b963d5-3b67-37fa-9f8b-7bea2365a011.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.222.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:ca:ae:ef:58:cf:84:8d:7a:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=71e8010f-6b98-45e2-b9fb-86345b8e93f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:68:fb:f5:e1:28:23:78:72:c9:49:5c:a9: 3f:0b:7a:d0:a4:ab:c2:c3:c9:96:79:2a:3a:7c:0b: 2f:07:34:55:7c:8d:da:4b:12:b6:cb:f1:23:0b:3e: 54:4f:a5:e8:69:94:24:6f:70:9f:dc:45:59:9b:7b: ff:ea:3b:60:08:ca:ab:20:ae:5e:6a:b9:56:7c:02: eb:c0:37:9b:63:c7:f1:d5:45:a8:72:41:75:91:20: 1b:04:d9:16:f2:64:d5:e2:50:1e:aa:22:21:fd:b8: c8:9d:0e:7e:3f:24:10:1f:4c:6d:10:58:cf:93:5d: 16:8e:11:d1:b8:ce:9e:15:24:f4:7f:39:ba:2f:2d: 37:7b:92:71:89:0e:0c:8a:e8:56:07:0f:9d:ab:33: d3:93:0c:14:a9:e8:59:1b:ca:bb:81:e1:74:dc:69: 93:11:ef:fa:41:0a:18:45:0c:bd:04:df:af:48:fa: 39:66:4e:3a:7e:ee:91:22:c6:d9:73:06:c4:3d:aa: 1e:48:98:c0:03:3b:41:8d:6e:95:1e:d0:53:a0:85: de:b3:cc:f0:db:00:c9:31:6e:12:7b:f5:f3:fb:83: 12:35:ed:31:98:0b:a5:4b:22:22:47:ea:a3:8f:5d: 97:f3:f0:63:0a:4e:16:55:6d:d9:3d:68:70:f3:6d: 73:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1E:55:6C:89:87:7C:13:00:86:6F:AF:4D:84:0C:B3:88:4D:0F:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2b963d5-3b67-37fa-9f8b-7bea2365a011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ac:6e:e7:e1:6f:9c:18:af:fd:8e:b4:dc:2b:26:52:18:31: da:44:55:1b:9d:66:60:1b:dd:d1:c7:45:ee:34:9a:01:26:bc: ff:75:11:f3:b9:8c:f2:72:99:e5:c8:fb:6a:66:9e:ed:8c:cb: f8:6a:7a:43:da:be:a4:f4:7f:a8:3b:eb:dc:12:f8:69:94:09: 43:2a:88:7f:a5:33:ee:dc:6d:ec:34:37:05:65:4f:01:d4:c9: 59:16:67:30:97:e9:b5:21:a5:2d:7d:53:6f:c5:35:50:fe:40: 74:8b:4d:72:32:de:d0:64:45:4f:4d:62:f1:0b:2a:65:34:8f: 07:85:6b:53:c9:15:6d:87:ee:6c:fb:57:8a:5e:53:a7:b8:74: d8:33:a5:ad:9b:5c:b1:a4:35:7a:34:fd:51:cd:a6:a3:f2:67: 6b:50:9a:68:55:47:f2:bc:e8:78:43:9c:7d:36:09:59:b0:19: 77:e3:e2:01:a7:c8:8f:d7:c9:19:63:11:e3:42:41:ba:ca:8c: d1:93:9d:48:79:ec:4a:db:d6:f9:c5:a2:fa:46:a0:3d:4d:22: ce:9d:be:d1:67:fe:98:e4:93:3f:60:d7:d7:f7:a2:2f:f9:e8: 6c:92:a5:99:01:d1:a1:52:fd:14:9d:59:0a:ef:1d:ed:3f:f2: c6:12:a6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAcqu71jPhI16psAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NzFlODAxMGYtNmI5OC00NWUyLWI5ZmItODYzNDViOGU5M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Ro+/XhKCN4cslJXKk/C3rQpKvCw8mWeSo6 fAsvBzRVfI3aSxK2y/EjCz5UT6XoaZQkb3Cf3EVZm3v/6jtgCMqrIK5earlWfALr wDebY8fx1UWockF1kSAbBNkW8mTV4lAeqiIh/bjInQ5+PyQQH0xtEFjPk10WjhHR uM6eFST0fzm6Ly03e5JxiQ4MiuhWBw+dqzPTkwwUqehZG8q7geF03GmTEe/6QQoY RQy9BN+vSPo5Zk46fu6RIsbZcwbEPaoeSJjAAztBjW6VHtBToIXes8zw2wDJMW4S e/Xz+4MSNe0xmAulSyIiR+qjj12X8/BjCk4WVW3ZPWhw821zQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQeVWyJh3wTAIZvr02EDLOITQ82MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjJiOTYzZDUtM2I2Ny0z N2ZhLTlmOGItN2JlYTIzNjVhMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSsbufhb5wYr/2OtNwrJlIYMdpEVRudZmAb3dHHRe40mgEmvP91EfO5 jPJymeXI+2pmnu2My/hqekPavqT0f6g769wS+GmUCUMqiH+lM+7cbew0NwVlTwHU yVkWZzCX6bUhpS19U2/FNVD+QHSLTXIy3tBkRU9NYvELKmU0jweFa1PJFW2H7mz7 V4peU6e4dNgzpa2bXLGkNXo0/VHNpqPyZ2tQmmhVR/K86HhDnH02CVmwGXfj4gGn yI/XyRljEeNCQbrKjNGTnUh57Erb1vnFovpGoD1NIs6dvtFn/pjkkz9g19f3oi/5 6GySpZkB0aFS/RSdWQrvHe0/8sYSpvQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:10 2025 by rpki-client